u/Cassie_1991

Hey all,
I logged into Microsoft office to set up a new account and discovered that as a previous employee, I have full access to all tenant and employee files - this includes SSN and other sensitive information.

For full disclosure, I had connected this account to my personal devices in 2025. I did not have use for the app on my phone again until recently, where I discovered there was no authorization step or any stop action as it continually re-logged in without prompt.

I did notify them and I still have access, they changed the password, but all previous emails are available.